Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e8c867f71fadb788f2a4c3b6d3c63f31044a8fda.roa
File: e8c867f71fadb788f2a4c3b6d3c63f31044a8fda.roa (raw, json)
Hash identifier: R99RXGrc0oFSisWCpqMVglBEey/JuBltiTUv+y7rPcU=
Subject key identifier: D7:AE:58:85:D7:E9:E9:BA:7A:4F:42:53:00:CE:E5:7F:CB:0C:20:45
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 23C247
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e8c867f71fadb788f2a4c3b6d3c63f31044a8fda.roa
Signing time: Sat 07 Oct 2023 08:30:06 +0000
ROA not before: Fri 06 Oct 2023 08:30:06 +0000
ROA not after: Sun 05 Oct 2025 08:30:06 +0000
asID: 263781
IP address blocks: 138.118.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343495 (0x23c247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Oct 6 08:30:06 2023 GMT
Not After : Oct 5 08:30:06 2025 GMT
Subject: CN=e8c867f71fadb788f2a4c3b6d3c63f31044a8fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:75:c8:b3:d1:05:d4:03:f0:6e:e4:69:a0:
c9:81:a7:4e:62:52:54:82:81:80:cb:da:0f:e7:8b:
06:88:7c:13:3e:5b:f9:47:fc:75:2b:f8:49:06:a6:
a6:be:d4:00:1b:5d:a1:31:df:03:6f:b0:39:88:95:
97:8e:24:5e:c4:5d:03:f2:88:8c:c3:d5:35:c5:85:
ef:e6:bb:0f:23:2c:15:3c:8b:38:11:5f:64:66:5d:
88:53:ed:65:64:09:b9:8c:fe:96:d7:ba:12:3b:25:
11:66:89:8b:f5:1e:57:d7:cc:88:1d:36:9f:ac:6e:
35:1e:56:0b:01:40:a9:03:ff:88:d6:99:f8:a1:4f:
83:61:1f:d1:72:f1:65:8d:b6:a4:97:13:a8:73:b7:
a2:02:c3:a7:2d:aa:2b:43:4e:ff:17:fd:42:0f:a7:
9f:a0:c2:57:2f:78:a1:a6:2f:07:5f:d6:cb:2d:15:
dc:98:a4:0a:68:69:44:f5:ff:e3:84:88:7b:61:13:
9a:88:85:a1:49:ff:60:93:d1:d4:a4:27:f2:c1:8e:
12:87:e5:f3:e4:c2:ab:42:7c:64:d2:a8:f7:ef:2b:
3e:50:c0:74:ee:00:fd:c0:61:46:67:b3:0e:98:98:
84:1f:b6:46:be:16:75:e7:1b:11:83:1c:e1:76:63:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:58:85:D7:E9:E9:BA:7A:4F:42:53:00:CE:E5:7F:CB:0C:20:45
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e8c867f71fadb788f2a4c3b6d3c63f31044a8fda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5d:90:84:ac:70:39:b8:41:70:8d:29:8e:ad:17:d4:77:d1:
fc:f1:45:39:a1:9f:dc:50:ee:4a:4b:c4:fe:ca:56:c2:73:a6:
cf:48:69:42:99:00:7b:6b:9f:01:82:b6:6e:ef:4a:c7:25:0b:
22:c0:aa:b5:73:27:41:87:61:48:dc:d6:d3:51:98:89:16:9f:
d3:93:81:d6:cf:8b:0c:6c:78:de:c0:70:d2:be:d6:21:53:69:
39:8e:2f:9a:69:8e:76:76:00:47:b6:22:15:a4:70:da:3f:60:
b6:a9:86:5a:f8:0c:6d:fd:8c:99:7b:dc:aa:8d:79:f8:00:99:
a1:98:5a:4c:2e:e0:87:1f:18:ae:95:a1:5e:f7:f6:6e:73:c6:
c7:a4:05:4a:5d:be:c1:43:95:e0:96:2c:2a:e9:3d:44:52:0b:
da:37:d0:b6:24:6c:fc:2f:51:dc:eb:20:a5:1c:9a:76:65:2c:
68:d0:08:c9:42:e3:59:76:2f:6a:c0:38:ca:53:0c:4f:ce:d2:
6f:3b:83:64:29:53:b6:7e:fe:11:ff:1b:3b:92:b0:41:eb:6c:
27:5a:c3:37:63:98:1b:91:1b:ad:01:a5:0c:ec:b5:a0:4c:7e:
e5:4c:27:c9:37:a7:c5:c5:f7:91:0c:9d:df:36:9d:e1:0c:d9:
c1:b6:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 19:26:39 2023 by rpki-client on console-fra.rpki-client.org